Comment Re:Not only that... (Score 1) 60
This is what I do, it's a major reason I run my own email server but thankfully the '+' hack built into many modern MTAs gives you an approximation of the same thing... sort of.
The problem with that approximation is that you have to either add rules each time you add a new email address to your email service (ie "OK, add bypass rule allowing emails to victim+megacorpllc@example.com through") or you can act reactively and add rules to block incoming emails from known spammers ("OK, add block rule for anything addressed to victim+spamco@example.com")
The second scenario, though easier, is easily hacked by someone deciding to just add random junk after the "+". So you have to do the first. And the first isn't always practical, and it's definitely never user friendly.
Two other issues:
After managing my own email, I can tell you the system only half works even if you control the domain and have an easy to access way to quickly add an email address. There are two major problems:
1. You need to do more than just add words, hacker/spammers do dictionary attacks on MTAs. I've lost count of the number of times I've woken up to 60 emails all telling me that to send bitcoin to some address to prevent them from showing compromising pictures of me whacking off to porn. eg don't use "newegg@example.com", use "xywengge@example.com"
(On that note, some companies, Aliexpress is one, ban you from using the company name in the email address. So be prepared to use more cryptic naming conventions.)
2. You will need to regularly change addresses with companies that legitimately share your address with affiliates. For example, Amazon sends your email to third party sellers when you make an order, or once did anyway. Over time, some of those third party sellers leak the email address anyway.
To be honest, I think we need to reinvent email. How is it we've reinvented instant messaging dozens of times since IRC, but we haven't replaced SMTP with something a little less abusable? And how is it that something we should be controlling is now owned and controlled by two, maybe three, major corporations (Google, Microsoft, and maybe Yahoo), who could, at any moment, destroy all interconnectivity with private services that aren't part of that three?